Hacker News Reader

> I generally assume that's the case for any large company.

Despite Google partly losing its marbles recently, reporting bugs to Chromium still works very well.

I wonder if the open source element of the project keeps them “honest” to some extent?

Not my experience. When I report a bug in Chromium, it’s usually quickly verified as legit, and then left for dead forever.